<secret ephemeral='no' private='no'>
  <uuid>{{ item.volume_secret_uuid }}</uuid>
  <usage type='ceph'>
    <name>client.{{ item.ceph_user }} secret</name>
  </usage>
</secret>
